This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft
File:                     dd638a66-157d-4b37-b487-c2b5f4dbe940.mft (raw, json)
Hash identifier:          wEHjgAT9wgG5+rnmzcFWWH73NYMSgbeJUx4GpMTAUaw=
Subject key identifier:   9B:EF:3B:52:47:7F:A5:EE:E4:CB:DF:4E:8F:FF:86:9F:D2:21:53:21
Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
Certificate issuer:       /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
Certificate serial:       010D0C9F4328584C04F943DE7B87F6C78B2F1EC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft
Manifest number:          010D0C9F4328584073A84D50659089CBD4B36040
Signing time:             Sat 29 Nov 2025 10:00:03 +0000
Manifest this update:     Sat 29 Nov 2025 10:00:03 +0000
Manifest next update:     Tue 02 Dec 2025 10:00:00 +0000
Files and hashes:         1: 0a3f164c-5f88-301b-adde-657863805f1c.roa (hash: 2eouE7b65PSrQ8s0un2GYwsBxL3LZVvtfLLVVYrqtRQ=)
                          2: 129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa (hash: MQLufbgyyp1oDUVckGUGwXxoBPORbhj4RyOo8h2EluA=)
                          3: 32bae387-9a90-39b8-b5de-920b138b534b.roa (hash: S/U7f00uphPF99Q6b0YR6wqY7W/Woc9TSCNJDIcYykg=)
                          4: dd638a66-157d-4b37-b487-c2b5f4dbe940.crl (hash: LgPK4FsCkWQ6yJDKrKjcTXC84/HIQOmafGTVvE8Boeg=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Dec 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:04:f9:43:de:7b:87:f6:c7:8b:2f:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
        Validity
            Not Before: Nov 29 10:00:03 2025 GMT
            Not After : Dec  2 10:00:00 2025 GMT
        Subject: CN=aaebeb78-b64a-4741-a9e3-9ef075119111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:d1:00:2d:de:f8:42:b2:dc:8f:33:0b:10:
                    db:30:64:c9:56:62:59:98:1b:28:67:81:ea:10:44:
                    08:16:2e:38:a7:88:af:d6:11:ec:ae:90:0b:01:d3:
                    4a:18:c9:c3:be:db:41:07:9e:0b:68:68:f0:b8:f7:
                    88:ed:3a:db:1e:c7:a6:ea:bf:1a:cf:f7:1c:af:59:
                    d9:fa:d9:4f:1e:d8:2b:a3:0e:af:95:cc:fb:6f:04:
                    6a:83:1f:64:67:03:75:c1:89:2f:05:b4:5e:f2:4c:
                    f4:fb:f9:02:2d:ab:ca:c7:1f:db:f7:65:89:30:83:
                    ed:9e:d1:66:08:65:32:4a:fe:59:a3:af:b7:5b:29:
                    56:23:b9:16:1d:67:ee:c6:19:be:0f:f7:b3:fd:b0:
                    75:d4:dd:9d:32:ea:a3:1d:60:80:18:f3:06:f7:82:
                    69:be:43:c8:21:49:aa:3d:49:07:ef:b8:1e:18:6f:
                    ed:ea:8b:fd:41:0b:1a:60:dd:54:79:ae:25:dc:f8:
                    b7:5a:be:46:21:b1:b9:1d:97:b3:f4:6d:33:16:12:
                    3a:c5:9d:d9:74:36:fd:e2:28:d9:a7:35:70:f2:ac:
                    ad:76:f0:d4:74:a7:85:d6:e5:a1:83:a5:d1:f3:ec:
                    f9:22:5d:b2:c8:76:07:9e:ba:63:ec:68:c5:4f:e9:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EF:3B:52:47:7F:A5:EE:E4:CB:DF:4E:8F:FF:86:9F:D2:21:53:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl

            X509v3 Authority Key Identifier:
                keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:86:a1:cc:39:23:be:e9:c5:1c:18:f4:10:c5:b3:0f:21:e3:
         05:c1:e6:74:08:6d:ea:11:83:f6:5b:94:fe:46:32:cb:6e:ee:
         48:d3:0a:bd:96:14:33:82:b4:c0:00:03:ab:e6:dd:c5:ed:8c:
         61:89:29:0d:d1:5f:52:25:db:b5:84:b0:37:22:6c:a0:b5:79:
         43:a3:ca:91:8c:a8:33:cb:9a:3b:66:a2:e6:9f:8a:fc:49:ad:
         75:ed:e8:ac:85:bd:23:52:cb:0c:13:c7:db:c9:cb:94:77:d5:
         cd:22:d7:b6:02:f6:4f:70:a7:b7:f9:fc:44:3c:e1:a2:c4:0f:
         58:db:fd:63:55:53:30:99:f9:41:02:b1:12:c4:f0:48:53:3b:
         a9:55:99:71:89:29:20:d0:6f:d7:c1:16:fe:12:2b:66:50:79:
         cc:b0:91:a4:1a:f7:64:c5:d7:c3:99:1c:f2:45:1c:8b:6d:4f:
         59:db:70:15:4d:a8:61:39:a5:9c:a8:c5:21:a7:e9:3b:59:2a:
         2e:0d:5e:1b:1e:6b:01:03:25:25:f0:57:7b:2c:95:7f:79:af:
         2b:7c:dd:e3:80:d9:d3:08:08:ae:46:8b:8b:8d:23:5f:6c:fd:
         e1:7d:d5:d6:98:5d:38:0d:04:6b:79:3f:4b:3a:68:25:4d:eb:
         d3:d2:23:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 29 21:45:07 2025 by rpki-client